StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>If Company XYZ has an <a href="http://en.wikipedia.org/wiki/Intermediate_certificate_authorities" rel="nofollow">Intermediate Certificate Authority</a> certificate then you can. This kind of certificates are authorized by the root CA to issue new certificates and this fact is determined at creation time by specific properties (Basic Constraints, Key Usage, Enhanced Key Usage). </p> <p>But if Company XYZ has a regular certificate, used for example to identify websites, email users or software developers, it is not possible. Even thought in practice nothing stops you from creating a new certificate and signing it with another one (if you have it's private key), I don't think that you will obtain a valid certificate.</p> <p>So, if you have the right kind of certificate, you will have to sign foo with it. You can use <a href="http://msdn.microsoft.com/en-us/library/bfsktky3%28VS.80%29.aspx" rel="nofollow">makecert</a> or <a href="http://www.openssl.org/docs/apps/x509.html" rel="nofollow">open ssl</a> for creating a new <a href="http://en.wikipedia.org/wiki/X.509" rel="nofollow">X509 Certificate</a>. For example:</p> <p><code>makecert -pe -n "CN=foo" -a sha1 -sky exchange -eku 1.3.6.1.5.5.7.3.1 -in "Company XYZ" -is my -ir LocalMachine -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 -ss my -sr LocalMachine</code></p> <p>You will need to have the certificate for the Company XYZ installed in the Local Computer/Personal location in Windows Certificate Store. The resulting certificate will be added in the same place and you will be able to export it from there in various formats (.pfx, .cer, .p7b). Also this creates the keypair for the new certificate.</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload